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FINAL ACTION 



1. 



Amendment 10/02/08 has been entered. 



2. 



Claim 12 has been amended. Claims 12- 22 are pending. 



Claim Rejections - 35 USC § 103 



The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



3. Claims 12-15 and 17- 22 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Gillen (US Patent Publication No. 2003/0208290) in view of Galasso 
(US Patent No. 6,598,165). 

4. As to claim 12, Gillen teaches a method for providing protection from 
unauthorized access to a field device (i.e., microcontroller) in process automation 
technology (i.e., ... teaches a microcontroller whose control program is protected from 
being read out [par. 12]) , whereby the field device (i.e., microcontroller) is connected 
over a data bus with a control unit (i.e., teaches bus connection interface [24, fig. 1]), 
the field device (i.e., microcontroller) comprises at least one function block with defined 
communications interfaces (i.e., ... teaches a communication interface [22, fig. 1]), 
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whereby the set parameters of the function block (i.e., control program [par. 28]) an the 
field device determine the functionality of the field device and allow the execution of 
complicated control procedures while interacting with other field devices and allow the 
execution of complicated control procedures while interacting with other field devices 
connected to the data bus (i.e., ...teaches a control program for controlling execution of 
microcontroller [par. 28]) , the method comprising the steps of: 

storing in the field device (i.e., microcontroller) or in the function block a security 
program performing an authorization examination (i.e., interrogation) in the case of 
accessing the parameters of the function block or the field device over the data bus and 
permitting a change (i.e., activating basic function) in the parameters of the function 
block or the field device (i.e., microcontroller) or a replacement of the function block only 
in the case when the authorization is available (i.e., ...teaches an authorization 
examination [par. 33] consisting of an identifier Ki of the software protection device 
26.sub.Vi is interrogated by the control unit [par. 34], ... further teaches If the value X2 
transmitted by the software protection device 26.sub.Vi to the control unit 16 does not 
correspond to the value X1 , then only certain basic functionalities are activated [par. 
38]). 

Gillen does not teach: storing in the field device or function block a security program. 
However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Gillen as introduced by Galasso. Galasso 
discloses: 
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storing in the field device or function block a security program (to provide the 
capability to store a security program Galasso provides security firmware for which 
prevents the modifying of content base on proper authorization [col. 1, lines 50-57]). 

Therefore, given the teachings of Galasso, a person having ordinary skill in the art at 
the time of the invention would have recognized the desirability and advantage of 
modifying Gillen by employing the well known features of storing a security programs in 
a field device disclose above by Galasso, for which field device access authorization will 
be enhanced [col. 1 , lines 50-57]. 

5. As to claims 13 and 14 the system disclosed by Galasso shows substantial 
features of the claimed invention (discussed in the paragraph above), it fails to disclose: 
A method where: the security program is part of a function block (claim 13). 

A method where: the security program is part of firmware stored in the field 
device (i.e., microprocessor) (claim 14). 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Gillen as introduced by Galasso. Galasso 
discloses: 

A method where: the security program is part of a function block (claim 13) (to 
include security protection as part of a firmware stored on a field device [fig. 1]). 
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A method where: the security program is part of firmware stored in the field 
device (i.e., microprocessor) (claim 14) (to store security firmware in field devices 
[col. 1, lines 50-57]). 

Therefore, given the teachings of Galasso, a person having ordinary skill in the art at 
the time of the invention would have recognized the desirability and advantage of 
modifying Gillen by employing the well known features of storing a security programs in 
a field device disclose above by Galasso, for which field device access authorization will 
be enhanced [col. 1 , lines 50-57]. 

6. As to claim 15, Gillen teaches a method where the security program includes a 
security key (i.e., identifier), which is stored in the field device during configuration of the 
field device (i.e., microcontroller) [par. 36]. 

7. As to claim 17, Gillen teaches a method where the security key is created during 
installation of the field device [par. 7]. 

8. As to claim 18, Gillen teaches a method where the security key (i.e., identifier) is 
provided by the field device [par. 39]. 

9. As to claim 19, Gillen teaches a method where: the security key (i.e., identifier) is 
regularly renewed [par. 38]. 
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10. As to claim 20, teaches a method where: the security key (i.e., identifier) is 
renewed hourly [par. 38]. 

11. As to claim 21, Gillen teaches a method where: the security key (i.e., ...identifier) 
is stored only in the field device [par. 36]. 

12. As to claim 22, Gillen teaches a method where: the field devices (e.g., 
EEPROM) are sensors, actuators, controllers, PLCs or gateways [par. 25]. 

13. Claim 16 is rejected under 35 U.S.C. 103(a) as being unpatentable over Gillen in 
view of Galasso, as applied to claim 12 above, further in view of Moyer (US Patent No. 
7,266,848 and Moyer hereinafter). 

14. As to claim 1 6 the system disclosed by Galasso shows substantial features of the 
claimed invention (discussed in the paragraph above), it fails to disclose: A method 
where: the security key is an at least 128-bit code. 

However, these features are well known in the art and would have been an obvious 
modification of the system disclosed by Gillen in view of Galasso as introduced by 
Moyer. Moyer discloses: 

A method where: the security key is an at least 128-bit code (to provide a 
variable length security key capability [col. 3, lines 23-26]). 
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Therefore, given the teachings of Moyer, a person having ordinary skill in the art at the 
time of the invention would have recognized the desirability and advantage of modifying 
Gillen in view of Galasso by employing the well known features of variable length 
security key above by Moyer, for which field device access authorization will be 
enhanced [col. 3, lines 23-26]. 

Response to Arguments 

Applicant's arguments with respect to claims 12-22 have been considered but are 
moot in view of the new ground(s) of rejection. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See M PEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1 .136(a). A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply is filed 
within TWO MONTHS of the mailing date of this final action and the advisory action is 
not mailed until after the end of the THREE-MONTH shortened statutory period, then 
the shortened statutory period will expire on the date the advisory action is mailed, and 
any extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date 
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of the advisory action. In no event, however, will the statutory period for reply expire 
later than SIX MONTHS from the date of this final action. 



Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BRYAN WRIGHT whose telephone number is (571)270- 
3826. The examiner can normally be reached on 8:30 am - 5:30 pm Monday -Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, AYAZ Sheikh can be reached on (571 )272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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